3) AND the following is inserted into the message:
> __________ NOD32 1.789 (20040614) Notification __________
>
> Warning: NOD32 antivirus system found the following
> infiltrations in the message:
> eicar.com - Eicar test file - renamed to eicar.vcom
>
> http://www.nod32.com

So far so good.

BUT the problem is that under win2000, only action (1) occurs.
(Fortunately, that is the most important one, but I still want the
other actions too.) I get the same behavior whether or not the
user is Administrator.

My mailer is Mozilla Thunderbird 0.5 . This is a dual boot, so
everthing but the O/S is completely identical.